Skip to content

Commit

Permalink
more large file support
Browse files Browse the repository at this point in the history
  • Loading branch information
candicenonsense committed Jul 6, 2015
1 parent 397ee43 commit 1dec382
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 4 deletions.
7 changes: 4 additions & 3 deletions README
Original file line number Diff line number Diff line change
Expand Up @@ -2,17 +2,19 @@ nullfinder
==========

Small program for extracting data from sparse files with unknown structures
(like GPU memory dumps.)
like GPU memory dumps which are suspected to contain padding.

nullfinder uses blocks of nulls as breaks between data. It can then extract
data at the addresses between nulls. It will continue to glob nulls together,
allowing a map to be made. By default the program uses 8 nulls as a marker.
Depending on the particular dump image, larger (as large as a megabyte) blocks
of nulls may be informative.

compile:
g++ -std=c++0x -o nullf nullfinder.cc map_file.cc error.cc

usage:
nullfinder 0.1 by Candice Quates May 2015
nullfinder 0.2 by Candice Quates July 2015

Usage: ./nullf [--extract] [--nulls 8] filename(s)

Expand All @@ -39,5 +41,4 @@ using the --extract option.
Files are created as filename-address.extract.

bugs:
An argument to change the null-block length exists but does not work.
Program fragments are created in same directory as source.
2 changes: 1 addition & 1 deletion nullfinder.cc
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,7 @@ std::cout <<"null size "<< nullssize << std::endl;
if (extract) {
std::vector<unsigned char> image;
image.resize(n-(nullssize-1)-startaddr);
for (int x=0,y=startaddr; y<n-(nullssize-1); x++,y++) {
for (uint64_t x=0,y=startaddr; y<n-(nullssize-1); x++,y++) {
image[x]=(unsigned char)*(mfile->buffer+y);
}
std::stringstream builder;
Expand Down

0 comments on commit 1dec382

Please sign in to comment.